last executing test programs: 9.189238757s ago: executing program 2 (id=409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x21, 0x2, 0x10000000000002) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x1) connect$unix(r2, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001a000100000000000000000081000001"], 0x1c}}, 0x8e4) ioctl$SIOCSIFHWADDR(r5, 0x890b, &(0x7f0000000240)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}) close(r3) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c00098008000140fffffff2140000001000010000000000000000000084000a8b7c6a781c92288e2d08eb5d6c76"], 0x90}}, 0x0) 8.85894368s ago: executing program 2 (id=411): bind$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d616e676c0000000000000000000000000000000000000004000000d1a2d6e70000000000000000"], &(0x7f0000000180)=0x2c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000040)=0x3, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 7.398578685s ago: executing program 2 (id=429): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000600)={0x11, 0x1b, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe8, r4, 0x20, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffc0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x18c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xec}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4040002}, 0x8000) (async, rerun: 32) r5 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) (async, rerun: 32) bind$packet(r1, &(0x7f0000000500)={0x11, 0xf8, r7, 0x1, 0x3, 0x6, @multicast}, 0x14) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@deltaction={0xc0, 0x31, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xbaf5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}]}]}, 0xc0}}, 0x0) 6.831739523s ago: executing program 2 (id=430): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = epoll_create1(0x80000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x800}, 0x4000010) recvmsg$qrtr(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1}, 0x38, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000280)) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'syzkaller1\x00', 0x9}) epoll_pwait(r7, &(0x7f0000000140)=[{}, {}], 0x2, 0xfff, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r8 = accept4(r0, 0x0, 0x0, 0x1000) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r8) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000000)={0x1, 0x0, 0x6, 0x340}, 0x8) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 5.793371362s ago: executing program 2 (id=441): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001a00010a000000000000000080"], 0x14}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000800005000100070000000500040003000000050005000200000014000780080013400000000408000b400000000009000200738b7a320000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) 5.575289135s ago: executing program 2 (id=444): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r2, 0x0, 0x0, 0x12003, &(0x7f00000000c0)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x101, 0xfffffffc}, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x7ee, 0x1, 0x1, 0x0, 0x0, [{{r0}, 0xc963}]}) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x4}, 0x1f) (async) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) syz_genetlink_get_family_id$nl80211(0xfffffffffffffffc, 0xffffffffffffffff) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) recvfrom$netrom(r2, 0x0, 0x0, 0x12003, &(0x7f00000000c0)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x101, 0xfffffffc}, 0x14) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x7ee, 0x1, 0x1, 0x0, 0x0, [{{r0}, 0xc963}]}) (async) 2.949708824s ago: executing program 0 (id=475): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 2.505600313s ago: executing program 0 (id=484): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="a0305f2e0c82246b84797dd8505b5576ca490dd75bcdc1bb695cd31bc936bdddf095dc75fb11daeb8a67dc10450a35aeacf835b2b0438ebb4c064780dea3166189cb32142f0d23fa62d57fe37d45f496aa60b81caf63ba793ebe32b2673c4b962cab386cce44aac6f6aeffccde68fe637f12a9cd0862d50e22465ac0d54f928c5c4c9306e45a6b3aecdb5a0f510032148ff88f8530b99a51fbb8b33ec916f93cf662e582ae2d94381cb0a1c9e64edc0c3d2f638545c25a943ca56da361a5418fda26bd9f8fa37b18466b81a8cb758f7d7e17285de723f154cd070666e932287ba34269fe3fecf065aa0ee944aea948d75f3fcf7e45", 0xf5}, {&(0x7f0000000100)="b5f7f0f96a0c90a04e4710dfb16380b0e46eb38f320b820a5a5ef06dacec18fe09feb499da6dd54555f36d37f4850a2340ad83223af39fbcaf3af7f43a265cafc2323699ac2e0fe11c1debe74964b1570ed6d2a4d52b3e008387d5f329b4cf07", 0x60}, {&(0x7f0000000180)="bdb3a2440b62f9", 0x7}, {&(0x7f00000001c0)="a3426054412e61e75cd10865a9d601b0fafdce205975b0f417b11101798c17659e3beb64e6096187da187f64bf3699a8ef2e2189b8100704bc84ef354d", 0x3d}, {&(0x7f0000000200)="deb6f94032bdf2c322cd404ecb9f02b44c853f9694be2faf0e7fe7ab2f282f1321e95f8ff6aee135d8701708a7b85239cedd315912dfd2c3383c450eda19721bb018611b4ef791fe83327e344d95f59ec1c79586a2969554a0feb79a942f6be75dc97c8d6fc753cfbf7b0dd4563a6a18fa43d288f8f85fae78c339b3caa090265e1178aaea84ae948028d9ca6cb6b543c673bdd94e84f1", 0x97}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="b4d5124a478f01a592403d66ff7a7cb8d60ceaf2419cc5672c8abdec07a5473fe5b8e1a9c5386c20c12ba85dda2afd3ca8bdbdc9acf94b13b44209057218587e3126a7b2bd0f49299380198b55e6ab8522e352925f9308f658", 0x59}, {&(0x7f0000001340)="ca96a34eba79f98787d305f555ba5ab8546adf0eb6791bc94afcd55a47f7d90edd20eb01206f8d36f19125cea87ad5789d707b33d4652d5db6ad685f1d040a2187810bec6375e387efcc64ddf8546970d00295bc3bcc309d70dd6178990179f74c19bd8343db9c0fcfcaf48097e5555f96a646743382b58bf007d84cd8c51db5a6892a41cfbdee9005ce8a7cc7a4314fbf28bbad004dfae4fe9e74aca6bf6c0eb1b3ba21baf39bd220654529ed9e80c7897120a23f9fafdd652019708e4a", 0xbe}, {&(0x7f0000001400)="c764160a7db455", 0x7}, {&(0x7f0000001440)="ef1b72c0e3cf01c36b1906ab7558bc6d37fb5d3ba58d62cb2df9b2f69b57dbaa105d1c3c8a9cb8d50405e5583d82c8d20d6ca6fd7cf19ea84acd161b3f206346b3c13032405dcc226c2ba808d2b4dc53b5386517645b09b394d14ec017bbb16029cd6b68434b8b76d2b2197cbb1458084598aebc583c7e39e2f156dfafdda28541", 0x81}], 0xa, &(0x7f00000015c0)=[{0xb0, 0x115, 0x8, "cfa30becd7605c94a78b372d7ed470dbf9ecea4453d118f9ae6fb1f0ba15164659ea68778e22bdfef19a1a31b2c1ee6dac73875d1a74d8159befe0e61c07912da31f869b476b2d70cba4d67a59aef26f134327449f0d3d7e6a961b146b6fc9447ca7c1cb769a42d23c8f4b5dac27bedf5bf048f3ed4bc0e9cdae769ded4e413d4f168213a796aedb22a56e75fdd798a25937fdc109585bc08b30a8e08f9f"}, {0x28, 0x113, 0xffffff2a, "309fcc846d654ea90cfdf76d567f57b8095cdce5ca723d"}], 0xd8}}], 0x1, 0x40c0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000001700)={0x0, r0, 0xffffffffffffcb62, 0x80000001, 0xfffffffffffeffff, 0x2}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001780)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000017c0)={@mcast2, 0x0}, &(0x7f0000001800)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)=@ipv4_newnexthop={0x40, 0x68, 0x210, 0x70bd25, 0x25dfdbfc, {0x2, 0x0, 0x6, 0x0, 0x3}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x5}, @NHA_OIF={0x8, 0x5, r1}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_OIF={0x8, 0x5, r2}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008105}, 0x20000010) close(r0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000001900), 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001940), 0x400, 0x0) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000001980)=r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)=@getchain={0x54, 0x66, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xb}, {0x10017, 0x9}, {0x5, 0xd}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x16}, {0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) pwritev(r5, &(0x7f0000001d80)=[{&(0x7f0000001b00)="983c21ac7e407e2773728c12f09970b90e34e97cdc8b8f8f3c01401c00b3eaf901660b5f896f5d4319b13b7d13969437eaca3861305e09056572787dd79d86351c54a041e444a30522d4ad2833d799f85c0a1caceb68f8a4f99a17cbb59484ce5a432cd291f53526deac15e6b7e8eed8cacff85a2425d6dd81b2a5bc8226bcf164d36f02ba974ec025990666898a7b3d5fee6dfcd6d92b756948045a4325ac1ce7adf93372421c92f279905027cbb24fcec4eeef4070fe3465e7b6918826ffd38259bdf0462fd7a15705999545261275b93b22c3733f593a48696f4392de9fca941b317cc511f525a1953129c91de43dcef22635fb1beb", 0xf7}, {&(0x7f0000001c00)="c3cb972d5a18397cdf6b91f524ef8be010ef2a1997d757c289ac5cfce963c3f3370523c30145a37aa30e756582fad83debecb4d526d53012d11473468eeefce472fdc446c1776d4f1514c32d7f6c22472a7f3b1c74d3e91c5e5963f2423d7c98d666b2d0df3cb435c822a03239cb744bf6f43b55e7f96aa68975eb3500a9e3f12890668363efcdaf579699b3f00683c2faf7e50b1a52b24ac76ab2d26d6284801d67639497441cbdc354e0d3", 0xac}, {&(0x7f0000001cc0)="12592a6914a857a76106f0a68ec86de74cffcf5f70f6229889db101fe8d10bc7978fc41edabd4ed51fc6ab320a5d02513e376b0726aa1c1843d47dd1aec3fd329b87879de1ba2bc6b2ad93d56674156f966a6ec3abdba166a9c5bfc354242f286d3b90fe31e455538dfc5c08210e4284c461f2196190ed613c2e85bf6d14a0e655400ccecd8d414e2bb5b53f5ac5d8c1b7e661d078286e30431c2807cd567e97ad5da270fb340272e90c4a589db8c28b3e", 0xb1}], 0x3, 0xa, 0xb33) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000001e00)=@add_del={0x2, &(0x7f0000001dc0)='ip6tnl0\x00'}) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000001e40)={0x6, 0x9}, 0x2) syz_init_net_socket$ax25(0x3, 0x2, 0xce) ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000001e80)=0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001fc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002000)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002040)={r8}, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000002080)={{0x0, 0x1, 0xa, 0x9, 0x81, 0xfff, 0xffff, 0x8, 0x9, 0xdbd1, 0x9, 0x7f, 0x100000001, 0x8, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000002140)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000003140)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "353a6d2d4ada51"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000004140)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000005140)={{0x0, 0x7f, 0x5, 0x9, 0x7, 0x1, 0x7fffffffffffffff, 0x1, 0x2, 0x40, 0x2, 0x8, 0x6, 0x200, 0x7}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00001129c0)={0x101, [{r10, r11}, {r12, r13}, {r14}], 0xb8, "0c25bf85f7c8dd"}) 2.485239555s ago: executing program 1 (id=485): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001803800040014000100eaff4d21e00000020000000000000000200002000a004e240000000220010000000000000000000000000002000100000d0001007564703a73"], 0x60}}, 0x40000080) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004c0001803800040014000100eaff4d21e00000020000000000000000200002000a004e240000000220010000000000000000000000000002000100000d0001007564703a73"], 0x60}}, 0x40000080) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 2.393161558s ago: executing program 0 (id=486): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x20000004) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000500)=ANY=[@ANYRES64=r2, @ANYBLOB="68d0e6076bfffa29e6ed40b7852fac1854afbe50d363f930637c8a6d7ff211642024d4d77f8ee027d0c0b1d158edcefb63e150449e9b7826a42b211cb57e382b9ba658a4cb5e7e4b8e3d80ba474d7f7516a8db9390a24c5b39a47f6511c12bf54fd8d17298aeb3c283641708a97ec06214b96996e08afd5fbf9c506ac607"], 0x21c8}}, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, &(0x7f0000000080)) mmap(&(0x7f00008c4000/0x1000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x0, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800450000200000000000119078000000000000000000014e20000c9078010000001d7ed7e70af043764b033b51c3bf031db983ec683029c1a8094e7c7b"], 0x0) recvmmsg(r7, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x40000042, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRESHEX=0x0, @ANYBLOB="0001000001000000300012800c0001006d6163766c616e00200002800a000400000000000000000008000300000000180800010001"], 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x8001) 2.13642604s ago: executing program 0 (id=487): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$NFT_BATCH(r3, &(0x7f0000004a80)={0x0, 0x0, &(0x7f0000004a40)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELSET={0x14}], {0x14, 0x3f8}}, 0x3c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000000)={@empty, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x40003, {0x0, 0x0, 0x0, r4, 0x200, 0x3a08}, [@IFLA_PHYS_SWITCH_ID={0x11, 0x24, "ebe6fc7b96f10b15a8bb475ae2"}]}, 0x34}}, 0x7c7c2a3364e3315b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getpid() r7 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x94, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x800}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r5}, {0x37, 0x1, r6}, {0x8, 0x1, r7}, {0x8, 0x1, r0}, {0x8, 0x1, r8}, {0x8, 0x1, r8}]}]}, 0x94}}, 0x80) 2.134728208s ago: executing program 4 (id=488): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30, 0x2e, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x61]}}, &(0x7f0000000040)=""/249, 0x3c, 0xf9, 0x0, 0x1000, 0x10000, @value=r0}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xc, [@ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30, 0x2e, 0x30, 0x6f, 0x61, 0x30, 0x5f, 0x61]}}, &(0x7f0000000040)=""/249, 0x3c, 0xf9, 0x0, 0x1000, 0x10000, @value=r0}, 0x28) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x100, 0x10}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x3, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000800) (async) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000800) r6 = socket(0x1d, 0x800, 0x6150) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000440)={@mcast1, 0x76, r2}) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r7, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000580)="405340f58d57d879a9b7d098d1a8f473619f5aff12d559342217dd7746918dd00f2743cd7932ce0282aa56e74432cf04f5f34fce1d6de7729d8c67852e4796000e65d07f0bdb164c8b4d6a499ae7cc0e71070bb313194c90453628c7222fc15da922aba19364a6b2567a060fb9a7b3e1bd82fe132f34c48d2a1a45de66588e0db960f7c2cbec9897e37717cd6ba7b5", 0x8f, 0x20000000, &(0x7f0000000640)={0xa, 0x4e23, 0x9, @remote, 0x9}, 0x1c) openat$cgroup_subtree(r1, &(0x7f0000000680), 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x18c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34000000}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x18c}}, 0x0) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r8, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x18c, 0x2, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0xb8, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x34000000}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x18c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000940)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r7, 0xd0009411, &(0x7f0000000b40)={{r9, 0x32, 0x6, 0xffffffff, 0x4, 0x0, 0x4, 0x40, 0x0, 0xf, 0x7, 0x4, 0x4, 0x6, 0x8}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c00)={r1, 0x20, &(0x7f0000001bc0)={&(0x7f0000001b40), 0x0, 0x0, &(0x7f0000001b80)=""/14, 0xe}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001c00)={r1, 0x20, &(0x7f0000001bc0)={&(0x7f0000001b40), 0x0, 0x0, &(0x7f0000001b80)=""/14, 0xe}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c40)=r10, 0x4) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001cc0), r4) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000001d80)={&(0x7f0000001c80), 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x24, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x45}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, r13, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r12, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x20, r13, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080c5}, 0x4000000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r13, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44800) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r12, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x28, r13, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x44800) socket$igmp(0x2, 0x3, 0x2) (async) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r14, 0x0, 0x2a, &(0x7f0000002000)={0x6, {{0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x88) sendmsg$can_raw(r6, &(0x7f0000002180)={&(0x7f00000020c0), 0x10, &(0x7f0000002140)={&(0x7f0000002100)=@can={{0x1, 0x1, 0x0, 0x1}, 0x5, 0x2, 0x0, 0x0, "d641d5b5e0dbfdf0"}, 0x10}}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000021c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x1, {0xa, 0x4e22, 0xfffff5ac, @dev={0xfe, 0x80, '\x00', 0x34}, 0x5}}}, 0x3a) 2.110985784s ago: executing program 0 (id=489): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x3c, 0x6, 0x4, 0x30}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x5, {0x7}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'veth0_to_batadv\x00', 'batadv_slave_1\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffd]}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xffffff00], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x9, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 2.097150075s ago: executing program 1 (id=490): r0 = socket$inet6(0xa, 0x3, 0x9) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x1, 0x2, @remote, 0x6}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x8c67, 0x4) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{{0x2, 0x1, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000010000800000000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000529796aaf0db060b9f34c1bdae46f92678db9e730c979edc9fb52053afca26aa0ef67cf32009e8f790717ed1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) (async, rerun: 64) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@multicast, @random="07a24f79ee3f", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, ' \x00', 0x30, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], {0x0, 0x883e, 0x30, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "aaf43bbacf0d7d4dd62d252269d4c77febb30ee631ad1be1a15e592d3678edb6aaec874e"}}}}}}}, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r2}, 0x38) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r4, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x76, r4}) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r2}, 0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000000000e000003180007800c000180080001"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="0c0002"], 0x24}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340100000201010400000000000000000200000838000e8006000340000300002c000180f3ff020000000000000000000000ffff6401010014000400fc0200000000000000000000000000000800048004000280080015400000000134000180060003400001000006000340000000000c00028005000100ab0000001400018008000100e000000208000200e00000010800034000000200060012400004"], 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async, rerun: 32) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r10, 0x114, 0x8, &(0x7f0000000140)=0x2, 0x4) 1.924229247s ago: executing program 0 (id=491): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x4, @loopback, 0xe}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000280)={0x0, 0xb}, 0x8) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000001c0)=0x3ff, 0x4) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="85eb0100fdff0000000000001c00feff1b000000040000000e0000000000000100010000ba2b9db803ea30021026112555b820f300070230"], &(0x7f0000000280)=""/13, 0x38, 0xd, 0x0, 0xea06, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000004001000040000000500000001000000", @ANYRES32, @ANYRES32, @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[], 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) 1.921728956s ago: executing program 4 (id=492): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) 1.662868456s ago: executing program 1 (id=494): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006180)=""/25, 0x19}, 0xb8}], 0x1, 0x12140, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073019b00000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x9, 0xd, 0x401, 0x4}, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x25dfdbfc, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x84}]}, 0x24}}, 0x0) 1.524072271s ago: executing program 4 (id=495): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080003400000001108000240000000020900010073797a30000000000900020073797a32"], 0x84}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x2c8, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x8a}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1307}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x401}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_mq={0x7}, @TCA_STAB={0xf0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x9, 0xc, 0x6, 0x2, 0xfa5f, 0x1, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x40, 0x60, 0x9, 0x80000001, 0x0, 0x9, 0x8, 0x4}}, {0xc, 0x2, [0x2, 0x0, 0x7, 0xffff]}}, {{0x1c, 0x1, {0x4, 0x8, 0xfff7, 0x4, 0x1, 0x9, 0xfff, 0x3}}, {0xa, 0x2, [0x7, 0x100, 0x8]}}, {{0x1c, 0x1, {0x1, 0x5, 0x7, 0x4, 0x2, 0x1, 0xf705, 0x1}}, {0x6, 0x2, [0xfb]}}, {{0x1c, 0x1, {0x0, 0x7, 0x3, 0x2, 0x1, 0x100, 0x100, 0x6}}, {0x10, 0x2, [0x6, 0x1, 0x3, 0xf3f8, 0x6, 0x6]}}, {{0x1c, 0x1, {0xf7, 0x8, 0x2, 0x4, 0x0, 0x3, 0x252, 0x3}}, {0xa, 0x2, [0x80, 0x0, 0x79da]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_STAB={0x184, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0xc, 0x4, 0x0, 0x1, 0x8, 0x0, 0xa}}, {0x18, 0x2, [0x9, 0x7, 0xf, 0x8, 0x5, 0xb5, 0x8, 0xfff, 0x2439, 0x4]}}, {{0x1c, 0x1, {0xa, 0x7, 0x2, 0x0, 0x2, 0x0, 0x2, 0x8}}, {0x14, 0x2, [0x4, 0x9, 0x1, 0x5, 0x8000, 0x0, 0x9, 0x5]}}, {{0x1c, 0x1, {0x0, 0xa0, 0x2, 0xa, 0x2, 0x0, 0x6, 0x3}}, {0xa, 0x2, [0x3ff, 0x7ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x7, 0x800, 0x0, 0x3, 0x8, 0x5}}, {0xe, 0x2, [0x1, 0x4, 0x4, 0x47, 0x1bc8]}}, {{0x1c, 0x1, {0x1, 0x8, 0x71a, 0x3, 0x0, 0x2, 0xfffffffc, 0x3}}, {0xa, 0x2, [0x9e03, 0x5, 0x9]}}, {{0x1c, 0x1, {0x3, 0x0, 0x10, 0x2, 0x1, 0x7f, 0x1, 0x8}}, {0x14, 0x2, [0x851, 0x5, 0x1, 0x7ff, 0x3b, 0x8, 0x1, 0x2]}}, {{0x1c, 0x1, {0x9, 0x1, 0x6, 0x2, 0x0, 0x3, 0xfffffffa, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x7f, 0x0, 0x5, 0xb, 0x2, 0x7, 0x1e86e648, 0x3}}, {0xa, 0x2, [0x8, 0x3, 0xfffe]}}, {{0x1c, 0x1, {0x0, 0x6, 0xa, 0x4e, 0x0, 0x1, 0x4, 0x1}}, {0x6, 0x2, [0xfffe]}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x1e016a02591be14f}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 64) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4090, 0xffa}], 0x1}, 0x0) (async, rerun: 64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='percpu_alloc_percpu\x00'}, 0x10) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r10}, 0x14) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r9, @ANYRES64=r0, @ANYRES8=r9, @ANYRES16=r9], 0x104}}, 0x20008080) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.452595374s ago: executing program 3 (id=496): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x17, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @sk_reuseport=0x28, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1], &(0x7f0000000240)=[{0x0, 0x2, 0x5, 0x5}, {0x1, 0x1, 0x7, 0x4}], 0x10, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000340)=r3}, 0x20) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000003c0)={@remote, @remote, 0x0}, &(0x7f0000000400)=0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000440)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000004c0)={'veth0_to_bond\x00', 0x800}) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x1, 0x18}, 0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xb0}}]}, {0x0, [0x0, 0x30, 0x61]}}, &(0x7f00000006c0)=""/7, 0x35, 0x7, 0x1, 0x3, 0x10000, @value}, 0x28) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x4000, 0x0, 0x0, 0x40f00, 0x52, '\x00', r5, 0x0, r10, 0x8, &(0x7f0000000740)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x1, 0x0, 0x80}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000840)=[r4, r4, r2, r4, r11, 0x1], &(0x7f0000000880)=[{0x0, 0x1, 0x5}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0xa, 0xf}, {0x2, 0x4, 0x0, 0x1}, {0x1, 0x2, 0x2, 0x4}, {0x3, 0x2, 0x7, 0x6}, {0x2, 0x3, 0x0, 0xb}, {0x1, 0x3, 0xd, 0xa}, {0x4, 0x2, 0x8, 0x3}, {0x4, 0x1, 0xc, 0xa}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000a00)={0xffffffffffffffff, 0x1, 0x7, 0xebf, @vifc_lcl_ifindex=r5, @rand_addr=0x64010102}, 0x10) r12 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e21, 0xb, @private2, 0xfff}}, 0x88, 0x8000, 0x3e714f5c, 0xfffffff4, 0x10, 0x0, 0xcb}, &(0x7f0000000b00)=0x9c) getsockopt$inet_sctp_SCTP_RTOINFO(r12, 0x84, 0x0, &(0x7f0000000b40)={r13, 0x9, 0xe, 0x3}, &(0x7f0000000b80)=0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'syztnl2\x00', r5, 0x29, 0x2, 0x3, 0x4, 0x25, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x700, 0x8000, 0xff, 0xf873}}) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x130, r14, 0x0, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "806301fb2706ef06d81e848ee33bdb413afed60a5c6788b0"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d3d5d97ffd54d738d510ee151db89fd745da7d7cf44af41e"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4589dbfe2025339b6f2fb45802938087041041d5bd425d20"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "adcb37370a36f0dd90d084e6aae9be002fd356239a235b59"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f5c25749052d88cce834204db2f5fcb1c47917ea26290e35"}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0x130}}, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000f00)) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000f40)=r10, 0x4) r16 = openat$cgroup_ro(r8, &(0x7f0000000f80)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$ax25(r8, &(0x7f0000000fc0)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x48) setsockopt$CAN_RAW_FD_FRAMES(r16, 0x65, 0x5, &(0x7f0000001040)=0x1, 0x4) 1.407489408s ago: executing program 1 (id=497): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r2, 0x3, 0xfffffffe, 0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000600)=r5, 0x4) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa9c15f9692fad38aaaa86dd60000000006e440633132edd9f3b260a65ce180600fe8000000000000000000000000000b9fe8000"/71, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200119078000004020000"], 0x0) sendmmsg(r0, &(0x7f0000000540), 0x0, 0x10) 1.240208345s ago: executing program 4 (id=498): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x8c8}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x44}}, 0x8000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @private}, &(0x7f0000000240)=0x10) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000340)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x1d0, r3, 0x200, 0x0, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x1b4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xf0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x7fff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}]}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x5396ebcf8cd913b0}, 0x10) (async) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x94, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'u:object_r:app_data_file:s0:c512,c768\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x20044800}, 0x200048c1) (async) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000080)) 1.208096838s ago: executing program 3 (id=499): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="180600e800000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000010000085000000060000009500000000000000263b99644665077684bcce95065ef4cb61ec325fe0e7f9bfdedc81bf3c13456be58d947c564a9b709a80afa43d65b1082ccba489523ceb411c"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000034e1a2e072df6b55f11d00000000000000000000007112190000000000959a1a554b03c966d948d618cd05f97789ef02a23e85621e418e2e5bba4967aa69fc7be1e95c980f62df2403d4d37d351c3c191e3b50b9cc1240e7a91d8321d001225a3e68f7276b21121e45138ee5fc3cb42ef62c7c52bb0950324b0e625bd769cac3826bf14756023983a8ea2ae1755d565dc2ac720f7fb8fd8e88a3fcb1b1783d03937fe72ffe7e1cc432c4b0c0cc3fc1ea6e9b773bcdb1af3c1daaa70df586f4580d2a70aebbb5129fff7e6463d71976d48a9a63c2c1e5ff20787e03bf2683ae847a39224b45"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.092460787s ago: executing program 1 (id=500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x13) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x198, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x3ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x1000}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8996}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x5c}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x200}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7474}, {0x8, 0xb, 0x3}}]}, 0x198}, 0x1, 0x0, 0x0, 0x4048cc5}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5758338f9949a2b4}, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) r5 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000640)) accept4$ax25(r5, &(0x7f0000000680)={{0x3, @default}, [@bcast, @null, @remote, @rose, @netrom, @netrom, @null, @bcast]}, &(0x7f0000000700)=0x48, 0x80000) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000740)={0x8, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x6, [{{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e21, @empty}}, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e21, @empty}}]}, 0x390) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000b00), &(0x7f0000000b40)=0xc) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r8, &(0x7f0000000b80)={0x24, @none={0x0, 0x1}}, 0x14) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f0000000bc0)=0x4, 0x4) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xbc, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:setfiles_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000d80)={'pimreg1\x00', {0x2, 0x4e23, @local}}) r10 = accept$inet(r6, 0x0, &(0x7f0000000dc0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00', 0x0}) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r1) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e40), 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x48, r12, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4001) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000fc0)={0x0, 0x3, 0x8, 0x1}) (async) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001400), r3) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x44, r13, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1a}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4000000) 1.040229483s ago: executing program 4 (id=501): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000ce2000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0x913e0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640886dd", 0x0, 0x1200}, 0x28) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) (rerun: 64) 946.359014ms ago: executing program 3 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000bb3c0003800c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000013c0002800c00028005000100000000002c0001800c0003"], 0xc8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000080)="10b6fce2fc05df5bd5e06bf7db0097", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) 879.718309ms ago: executing program 1 (id=503): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)={0x2, 'vlan0\x00', {}, 0x6}) socket$kcm(0x2, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2d, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000002a4b25c63945f0de74c83558cbc071e7d58a6daf066f6cb3427e9d8e9d9e2bae4aea8cf809e62a2ba1047287486aac417d42502b3abc9730ff10b486f18514d42261e0e8714f8b68701ed6a1167bd16cb544c3dcf30b6a0bff179b0dc3921c1e6deb12e0945de70637a59fc10a8efbeab55acfa81edc5e4a8f052609", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r5, @ANYRESHEX=r4], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockname$packet(r8, 0x0, &(0x7f0000000bc0)) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='xprtrdma_dma_maperr\x00', r9}, 0x18) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r10}, 0x18) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0xc0010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r12, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0400403a00fe800000000000000000000000008000000000000000000000000000000000010100907802000000670f0d2900073300fc010000000000000000000000000000ff010000000000000000000000000001040002a30000000042a475f3acd1fdc8"], 0x0) 484.414427ms ago: executing program 3 (id=504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x30}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async, rerun: 64) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40) (async) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0xfffffffffffffd5f, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) 282.795297ms ago: executing program 3 (id=505): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x60002001}) shutdown(r0, 0x1) socket$key(0xf, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp(0x2, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r5) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}}, 0x8800) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x8, 0x98f, 0x60, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @loopback, 0x8000, 0x40, 0x2}}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@rand_addr, 0x0}, &(0x7f0000000200)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0xb1, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x76, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xd4, r7, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x200088d0) socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000040)={0x1000000000000, 0x0, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x4000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x400003ff, 0x0, 0x0, 0xb, 0x50, 0x0, 0x7fffffff, 0x1200000}, 0x0, 0x0) 80.431672ms ago: executing program 3 (id=506): socket$netlink(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$tipc2(0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002c00010026bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 0s ago: executing program 4 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socket(0x2, 0xa, 0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000339a00000000000000000000850000002e00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20}, [@RTA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, @RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x0, 0x0, 0x7}}]}}]}, 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17114be8c47ffd23}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000}, 0x10) kernel console output (not intermixed with test programs): DUID 00:04:e7:a9:54:ba:d6:ca:b0:a9:a8:44:aa:dd:15:41:58:fb forked to background, child pid 5503 [ 50.473955][ T5504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.486772][ T5504] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. syzkaller login: [ 74.191441][ T5826] cgroup: Unknown subsys name 'net' [ 74.304282][ T5826] cgroup: Unknown subsys name 'cpuset' [ 74.313220][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.837100][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.077448][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.090266][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.100277][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.110539][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.120295][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.128083][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.304372][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.313315][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.329076][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.360419][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.368102][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.377831][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.385845][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.393743][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.396904][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.411024][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.411165][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.425173][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.427355][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.434088][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.440453][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.448421][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.460949][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.468737][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.477453][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.486935][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.494990][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.504388][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.512519][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.533148][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.642295][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.797715][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.805236][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.814372][ T5836] bridge_slave_0: entered allmulticast mode [ 78.821787][ T5836] bridge_slave_0: entered promiscuous mode [ 78.871455][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.878594][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.886130][ T5836] bridge_slave_1: entered allmulticast mode [ 78.894032][ T5836] bridge_slave_1: entered promiscuous mode [ 78.978804][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.011389][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 79.024121][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.137785][ T5836] team0: Port device team_slave_0 added [ 79.184443][ T5836] team0: Port device team_slave_1 added [ 79.202603][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.224614][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.231753][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.257721][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.274343][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 79.293327][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 79.303937][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.311301][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.337381][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.407024][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.417922][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.425371][ T5843] bridge_slave_0: entered allmulticast mode [ 79.432705][ T5843] bridge_slave_0: entered promiscuous mode [ 79.482359][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.489477][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.496991][ T5843] bridge_slave_1: entered allmulticast mode [ 79.504443][ T5843] bridge_slave_1: entered promiscuous mode [ 79.575659][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.583003][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.590577][ T5842] bridge_slave_0: entered allmulticast mode [ 79.597329][ T5842] bridge_slave_0: entered promiscuous mode [ 79.609022][ T5836] hsr_slave_0: entered promiscuous mode [ 79.615870][ T5836] hsr_slave_1: entered promiscuous mode [ 79.643437][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.670232][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.677566][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.685491][ T5842] bridge_slave_1: entered allmulticast mode [ 79.692949][ T5842] bridge_slave_1: entered promiscuous mode [ 79.719881][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.744322][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.751572][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.758758][ T5852] bridge_slave_0: entered allmulticast mode [ 79.765885][ T5852] bridge_slave_0: entered promiscuous mode [ 79.784951][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.792301][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.799497][ T5848] bridge_slave_0: entered allmulticast mode [ 79.807346][ T5848] bridge_slave_0: entered promiscuous mode [ 79.823476][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.830784][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.838102][ T5852] bridge_slave_1: entered allmulticast mode [ 79.845335][ T5852] bridge_slave_1: entered promiscuous mode [ 79.869751][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.877047][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.886210][ T5848] bridge_slave_1: entered allmulticast mode [ 79.893826][ T5848] bridge_slave_1: entered promiscuous mode [ 79.936284][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.960325][ T5843] team0: Port device team_slave_0 added [ 79.968512][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.989690][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.011575][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.024043][ T5843] team0: Port device team_slave_1 added [ 80.031716][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.053190][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.133291][ T5842] team0: Port device team_slave_0 added [ 80.139756][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.147582][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.175013][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.189114][ T5848] team0: Port device team_slave_0 added [ 80.198667][ T5848] team0: Port device team_slave_1 added [ 80.207318][ T5852] team0: Port device team_slave_0 added [ 80.215710][ T5852] team0: Port device team_slave_1 added [ 80.222357][ T55] Bluetooth: hci0: command tx timeout [ 80.231105][ T5842] team0: Port device team_slave_1 added [ 80.237460][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.245443][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.272129][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.343818][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.352148][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.378698][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.391791][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.398859][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.425053][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.449763][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.456893][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.482865][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.495559][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.502775][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.528990][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.545235][ T55] Bluetooth: hci2: command tx timeout [ 80.550204][ T5847] Bluetooth: hci1: command tx timeout [ 80.563781][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.571092][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.597302][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.620287][ T5847] Bluetooth: hci4: command tx timeout [ 80.620514][ T55] Bluetooth: hci3: command tx timeout [ 80.667426][ T5848] hsr_slave_0: entered promiscuous mode [ 80.674057][ T5848] hsr_slave_1: entered promiscuous mode [ 80.680324][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.688190][ T5848] Cannot create hsr debugfs directory [ 80.694660][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.702212][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.728165][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.754004][ T5843] hsr_slave_0: entered promiscuous mode [ 80.761690][ T5843] hsr_slave_1: entered promiscuous mode [ 80.767785][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.775644][ T5843] Cannot create hsr debugfs directory [ 80.881416][ T5852] hsr_slave_0: entered promiscuous mode [ 80.887697][ T5852] hsr_slave_1: entered promiscuous mode [ 80.894764][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.902972][ T5852] Cannot create hsr debugfs directory [ 80.997635][ T5842] hsr_slave_0: entered promiscuous mode [ 81.004719][ T5842] hsr_slave_1: entered promiscuous mode [ 81.012590][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.020393][ T5842] Cannot create hsr debugfs directory [ 81.043430][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.080398][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.114201][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.129047][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.366435][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.379163][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.396415][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.413947][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.484756][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.508256][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.517598][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.527840][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.567806][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.595220][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.621738][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.631788][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.645837][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.653228][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.674971][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.682148][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.697810][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.731176][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.776304][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.786557][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.819677][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.855310][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.939456][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.978929][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.036528][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.043737][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.075531][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.082733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.208472][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.226013][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.254207][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.271303][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.288321][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.301765][ T55] Bluetooth: hci0: command tx timeout [ 82.327689][ T2995] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.334888][ T2995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.356033][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.365924][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.381746][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.388890][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.410082][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.417227][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.465345][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.472542][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.514305][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.521487][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.535301][ T2995] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.542514][ T2995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.628480][ T55] Bluetooth: hci1: command tx timeout [ 82.634824][ T5847] Bluetooth: hci2: command tx timeout [ 82.641507][ T5836] veth0_vlan: entered promiscuous mode [ 82.697973][ T5836] veth1_vlan: entered promiscuous mode [ 82.705984][ T55] Bluetooth: hci3: command tx timeout [ 82.716195][ T55] Bluetooth: hci4: command tx timeout [ 82.775298][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.838800][ T5836] veth0_macvtap: entered promiscuous mode [ 82.859338][ T5836] veth1_macvtap: entered promiscuous mode [ 82.879080][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.968201][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.996667][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.033192][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.045597][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.056818][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.069358][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.146186][ T5852] veth0_vlan: entered promiscuous mode [ 83.197075][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.216868][ T5852] veth1_vlan: entered promiscuous mode [ 83.332700][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.386875][ T5852] veth0_macvtap: entered promiscuous mode [ 83.397986][ T5843] veth0_vlan: entered promiscuous mode [ 83.422676][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.439948][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.463574][ T5852] veth1_macvtap: entered promiscuous mode [ 83.485388][ T5843] veth1_vlan: entered promiscuous mode [ 83.504538][ T5842] veth0_vlan: entered promiscuous mode [ 83.521402][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.529273][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.557758][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.569224][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.582887][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.593664][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.604717][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.616472][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.659338][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.670624][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.679384][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.688801][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706012][ T5842] veth1_vlan: entered promiscuous mode [ 83.739867][ T5843] veth0_macvtap: entered promiscuous mode [ 83.753216][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.777952][ T5848] veth0_vlan: entered promiscuous mode [ 83.798018][ T5848] veth1_vlan: entered promiscuous mode [ 83.806535][ T5843] veth1_macvtap: entered promiscuous mode [ 83.845981][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.880110][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.889990][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.913061][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.933855][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.965295][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.990947][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.007341][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.018233][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.035800][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.079758][ T5848] veth0_macvtap: entered promiscuous mode [ 84.096928][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.112080][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.124914][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.136030][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.178120][ T5848] veth1_macvtap: entered promiscuous mode [ 84.191303][ T5842] veth0_macvtap: entered promiscuous mode [ 84.241643][ T5842] veth1_macvtap: entered promiscuous mode [ 84.252995][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.281237][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.327858][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.347415][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.358575][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.376909][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.388247][ T55] Bluetooth: hci0: command tx timeout [ 84.409604][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.425599][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.438215][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.490980][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.519716][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.537671][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.558850][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.569525][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.585783][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.599107][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.618071][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.641122][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.652897][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.664308][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.678104][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.689060][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.699525][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.711862][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.716694][ T55] Bluetooth: hci1: command tx timeout [ 84.724698][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.735301][ T5847] Bluetooth: hci2: command tx timeout [ 84.768308][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.780480][ T55] Bluetooth: hci4: command tx timeout [ 84.785958][ T55] Bluetooth: hci3: command tx timeout [ 84.787823][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.812664][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.827428][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.846359][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.867947][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.879861][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.898892][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.910889][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.928083][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.938406][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.956689][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.967909][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007173][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.034510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.056988][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.069665][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079667][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.095951][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.216959][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.241162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.453150][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.466105][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.563539][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.591954][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.641121][ T2995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.649347][ T2995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.778447][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.799039][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.870282][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.878164][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.091787][ T5947] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 86.209467][ T5950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 86.376606][ T5954] bridge0: port 3(vlan2) entered blocking state [ 86.449622][ T5954] bridge0: port 3(vlan2) entered disabled state [ 86.461505][ T55] Bluetooth: hci0: command tx timeout [ 86.483061][ T5957] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 86.490932][ T5956] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 86.491155][ T5954] vlan2: entered allmulticast mode [ 86.548011][ T5954] vlan2: entered promiscuous mode [ 86.662255][ T5964] sctp: failed to load transform for md5: -2 [ 86.669309][ T5957] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.671676][ T5962] sctp: failed to load transform for md5: -2 [ 86.759009][ T5957] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.789818][ T55] Bluetooth: hci1: command tx timeout [ 86.795396][ T55] Bluetooth: hci2: command tx timeout [ 86.860635][ T5847] Bluetooth: hci3: command tx timeout [ 86.861819][ T55] Bluetooth: hci4: command tx timeout [ 86.886663][ T5980] netlink: 'syz.3.13': attribute type 6 has an invalid length. [ 87.084790][ T5985] tun0: tun_chr_ioctl cmd 1074025675 [ 87.113635][ T5985] tun0: persist enabled [ 87.172335][ T5988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 87.233141][ T5991] tun0: tun_chr_ioctl cmd 1074025675 [ 87.238530][ T5991] tun0: persist disabled [ 87.251601][ T5992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'. [ 87.267652][ T5991] netlink: 68 bytes leftover after parsing attributes in process `syz.1.15'. [ 87.307416][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.360272][ T5992] netlink: 'syz.4.14': attribute type 7 has an invalid length. [ 87.374627][ T5993] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 87.449904][ T5992] netlink: 'syz.4.14': attribute type 8 has an invalid length. [ 87.530536][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14'. [ 87.642804][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 87.695719][ T6001] 8021q: VLANs not supported on ip_vti0 [ 88.278674][ T6023] netlink: 'syz.3.24': attribute type 21 has an invalid length. [ 88.401585][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 88.656237][ T6040] Zero length message leads to an empty skb [ 88.669914][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.707309][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.745760][ T6021] bond0 (unregistering): Released all slaves [ 88.798780][ T6023] netlink: 152 bytes leftover after parsing attributes in process `syz.3.24'. [ 88.900257][ T6042] syz.4.30 uses obsolete (PF_INET,SOCK_PACKET) [ 88.954911][ T6042] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.017115][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.30'. [ 89.019426][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.32'. [ 89.089764][ T6048] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 89.645825][ T6076] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.050709][ T6092] smc: net device bond0 applied user defined pnetid SYZ0 [ 90.807770][ T6130] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 90.859135][ T6130] ieee802154 phy0 wpan0: encryption failed: -22 [ 91.271984][ T6151] __nla_validate_parse: 8 callbacks suppressed [ 91.272005][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 91.851241][ T6170] raw_sendmsg: syz.2.69 forgot to set AF_INET. Fix it! [ 91.928964][ T6178] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 91.956693][ T6179] netlink: 'syz.0.73': attribute type 2 has an invalid length. [ 91.968770][ T6174] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 91.977600][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.71'. [ 92.208087][ T6189] netlink: 'syz.2.76': attribute type 5 has an invalid length. [ 92.259458][ T6191] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.303837][ T976] cfg80211: failed to load regulatory.db [ 92.355250][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 92.703166][ T6217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 92.801450][ T6221] Bluetooth: MGMT ver 1.23 [ 92.871517][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.84'. [ 93.115111][ T30] audit: type=1107 audit(1742181511.697:2): pid=6231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Àïï' [ 93.517269][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 93.553685][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 93.621113][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 93.661431][ T6256] xt_CT: You must specify a L4 protocol and not use inversions on it [ 93.670712][ T6252] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 93.687815][ T6252] syz_tun: entered promiscuous mode [ 93.722692][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.93'. [ 93.914577][ T6269] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 93.948737][ T6269] warning: `syz.3.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.022701][ T6272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.97'. [ 94.814576][ T6297] veth0_to_bridge: entered promiscuous mode [ 94.832647][ T6297] netlink: 'syz.1.105': attribute type 12 has an invalid length. [ 94.988327][ T6301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.665150][ T6296] veth0_to_bridge: left promiscuous mode [ 96.273939][ T6343] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 96.892486][ T6332] syzkaller1: entered promiscuous mode [ 96.899647][ T6332] syzkaller1: entered allmulticast mode [ 96.993115][ T6370] __nla_validate_parse: 3 callbacks suppressed [ 96.993136][ T6370] netlink: 96 bytes leftover after parsing attributes in process `syz.3.121'. [ 97.525524][ T6388] netlink: 44 bytes leftover after parsing attributes in process `syz.4.124'. [ 97.722103][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 97.770164][ T6394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.125'. [ 97.779117][ T6394] netlink: 52 bytes leftover after parsing attributes in process `syz.4.125'. [ 97.897284][ T6396] bond0: Unable to set down delay as MII monitoring is disabled [ 98.581002][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 98.710452][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.792260][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.822315][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.863336][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.892037][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.900662][ T976] IPVS: starting estimator thread 0... [ 98.917063][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.929596][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.940524][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.975186][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.988061][ T6425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.000291][ T6432] IPVS: using max 24 ests per chain, 57600 per kthread [ 99.110081][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 99.351278][ T6446] erspan0: entered promiscuous mode [ 99.463517][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 99.794720][ T6459] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 99.869472][ T939] IPVS: starting estimator thread 0... [ 99.983502][ T6462] IPVS: using max 19 ests per chain, 45600 per kthread [ 100.244391][ T6477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.551814][ T6487] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 100.747563][ T6497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.151'. [ 100.963226][ T6508] x_tables: duplicate underflow at hook 3 [ 100.988921][ T6504] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 101.264989][ T6519] netlink: 60 bytes leftover after parsing attributes in process `syz.0.158'. [ 101.280421][ T6519] unsupported nlmsg_type 40 [ 101.430879][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 101.714973][ T6539] sctp: [Deprecated]: syz.3.165 (pid 6539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.714973][ T6539] Use struct sctp_sack_info instead [ 101.892189][ T6549] vlan0: entered promiscuous mode [ 101.917576][ T6549] netlink: 'syz.0.168': attribute type 4 has an invalid length. [ 102.238716][ T6568] __nla_validate_parse: 1 callbacks suppressed [ 102.238738][ T6568] netlink: 44 bytes leftover after parsing attributes in process `syz.0.173'. [ 102.358881][ T6570] SET target dimension over the limit! [ 102.919493][ T6601] netlink: 'syz.4.184': attribute type 10 has an invalid length. [ 102.928901][ T6601] syz_tun: entered promiscuous mode [ 102.943098][ T6601] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.959487][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 103.888815][ T6619] netlink: 280 bytes leftover after parsing attributes in process `syz.2.188'. [ 104.017166][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.030647][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 104.786306][ T6629] Illegal XDP return value 6629 on prog (id 92) dev N/A, expect packet loss! [ 105.455936][ T6657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'. [ 105.497045][ T6658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.199'. [ 105.887150][ T6672] mac80211_hwsim hwsim6 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 107.365163][ T6720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.407216][ T6723] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 107.435767][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 107.592042][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.212'. [ 107.593331][ T6723] netlink: 'syz.0.211': attribute type 2 has an invalid length. [ 107.645726][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 107.655852][ T6723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 107.786105][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 107.946955][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 107.967762][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 108.005954][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 108.096419][ T6746] netlink: 18 bytes leftover after parsing attributes in process `syz.4.212'. [ 108.114839][ T6746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.212'. [ 108.305903][ T2995] wlan0: Trigger new scan to find an IBSS to join [ 108.581092][ T6761] x_tables: duplicate underflow at hook 2 [ 108.881119][ T6772] team0: entered allmulticast mode [ 108.881861][ T6769] x_tables: unsorted entry at hook 1 [ 108.886303][ T6772] team_slave_0: entered allmulticast mode [ 108.915964][ T6772] team_slave_1: entered allmulticast mode [ 109.641145][ T6798] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 109.754888][ T6801] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 109.761792][ T6798] team0: Port device netdevsim0 added [ 109.898325][ T6801] team0: Port device netdevsim0 removed [ 109.949086][ T6804] vlan3: entered allmulticast mode [ 109.961406][ T6804] syz_tun: entered allmulticast mode [ 109.977194][ T6804] syz_tun: left allmulticast mode [ 110.397494][ T6821] netlink: 'syz.2.231': attribute type 12 has an invalid length. [ 110.427976][ T6821] netlink: 'syz.2.231': attribute type 29 has an invalid length. [ 110.445066][ T6821] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 110.466207][ T6821] netlink: 'syz.2.231': attribute type 2 has an invalid length. [ 110.550671][ T6826] IPv6: NLM_F_CREATE should be specified when creating new route [ 110.791473][ T6830] xt_SECMARK: invalid mode: 0 [ 110.847286][ T6836] dummy0: entered promiscuous mode [ 110.864757][ T6836] macsec1: entered allmulticast mode [ 110.896733][ T6836] dummy0: entered allmulticast mode [ 110.941183][ T6836] dummy0: left allmulticast mode [ 110.960702][ T6836] dummy0: left promiscuous mode [ 111.135611][ T6850] net_ratelimit: 55 callbacks suppressed [ 111.135635][ T6850] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 111.342787][ T6717] wlan0: Trigger new scan to find an IBSS to join [ 111.415155][ T6860] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 111.595786][ T6867] syzkaller0: entered promiscuous mode [ 111.612770][ T6867] syzkaller0: entered allmulticast mode [ 111.641440][ T6871] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.916842][ T976] IPVS: starting estimator thread 0... [ 112.020176][ T6886] IPVS: using max 20 ests per chain, 48000 per kthread [ 112.601654][ T6892] __nla_validate_parse: 15 callbacks suppressed [ 112.601688][ T6892] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.249'. [ 113.627211][ T6877] netlink: 48 bytes leftover after parsing attributes in process `syz.0.246'. [ 113.658986][ T6892] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.951856][ T6909] veth1_macvtap: left promiscuous mode [ 113.957537][ T6909] macsec0: entered promiscuous mode [ 113.970661][ T6909] veth1_macvtap: entered promiscuous mode [ 113.977478][ T6909] macsec0: left promiscuous mode [ 114.005950][ T6916] netlink: 'syz.2.256': attribute type 11 has an invalid length. [ 114.204199][ T6924] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.258'. [ 114.264899][ T6924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 114.307051][ T13] wlan0: Creating new IBSS network, BSSID 86:04:aa:ea:b5:c0 [ 114.415638][ T6936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.261'. [ 114.837544][ T6955] netlink: 32 bytes leftover after parsing attributes in process `syz.1.265'. [ 115.650518][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.269'. [ 115.690923][ T6978] netlink: 80 bytes leftover after parsing attributes in process `syz.4.268'. [ 116.096739][ T6989] netlink: 'syz.3.272': attribute type 4 has an invalid length. [ 116.217171][ T6995] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 116.226138][ T6999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.277'. [ 116.778596][ T6995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.012455][ T7026] netlink: 24 bytes leftover after parsing attributes in process `syz.2.285'. [ 117.834216][ T7062] __nla_validate_parse: 2 callbacks suppressed [ 117.834237][ T7062] netlink: 52 bytes leftover after parsing attributes in process `syz.2.295'. [ 119.066127][ T7065] syzkaller0: entered promiscuous mode [ 119.078428][ T7065] syzkaller0: entered allmulticast mode [ 119.305522][ T7077] netlink: 56 bytes leftover after parsing attributes in process `syz.0.298'. [ 119.478042][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.300'. [ 119.494557][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 119.536917][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.302'. [ 120.219049][ T7103] tipc: Can't bind to reserved service type 1 [ 120.671805][ T7130] netlink: 56 bytes leftover after parsing attributes in process `syz.3.312'. [ 120.679433][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 120.912663][ T939] hid-generic 0005:07C0:06E6.0001: item fetching failed at offset 0/1 [ 120.945010][ T939] hid-generic 0005:07C0:06E6.0001: probe with driver hid-generic failed with error -22 [ 121.256867][ T7159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.321'. [ 121.257054][ T7157] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 121.581677][ T7173] ipip0: entered promiscuous mode [ 121.926251][ T7185] netlink: 56 bytes leftover after parsing attributes in process `syz.2.326'. [ 122.176114][ T7194] netlink: 'syz.0.329': attribute type 11 has an invalid length. [ 123.080229][ T7226] team0 (unregistering): Port device team_slave_0 removed [ 123.099604][ T7260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.336'. [ 123.133573][ T7226] team0 (unregistering): Port device team_slave_1 removed [ 123.422736][ T7262] bridge3: entered allmulticast mode [ 123.499047][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.338'. [ 123.688480][ T7276] sch_tbf: burst 7164 is lower than device lo mtu (65550) ! [ 123.699078][ T7283] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 123.756063][ T7287] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.767928][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.343'. [ 123.843915][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 123.872390][ T7287] netlink: 'syz.0.339': attribute type 10 has an invalid length. [ 123.991495][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.036793][ T7287] team0: Port device batadv0 added [ 124.658557][ T7312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 124.720806][ T7312] x_tables: duplicate underflow at hook 2 [ 125.003688][ T7332] netlink: 'syz.0.354': attribute type 30 has an invalid length. [ 125.101656][ T7340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.227603][ T7348] SET target dimension over the limit! [ 125.305771][ T7351] openvswitch: netlink: Key type 58 is out of range max 32 [ 125.349213][ T7355] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 125.357170][ T7355] netlink: 224 bytes leftover after parsing attributes in process `syz.3.359'. [ 125.626000][ T7373] netlink: 'syz.1.367': attribute type 10 has an invalid length. [ 125.679935][ T7373] veth0_macvtap: left promiscuous mode [ 125.697626][ T7373] veth0_macvtap: entered promiscuous mode [ 125.707413][ T7375] sctp: [Deprecated]: syz.0.366 (pid 7375) Use of int in max_burst socket option. [ 125.707413][ T7375] Use struct sctp_assoc_value instead [ 125.735233][ T7373] team0: Device macvtap0 failed to register rx_handler [ 125.769054][ T7373] veth0_macvtap: left promiscuous mode [ 125.784400][ T7375] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 125.854602][ T7375] veth0_vlan: left promiscuous mode [ 125.863968][ T7375] veth0_vlan: entered promiscuous mode [ 125.882381][ T7375] team0: Device veth0_vlan failed to register rx_handler [ 126.052705][ T7383] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.119312][ T7383] netlink: 'syz.1.369': attribute type 32 has an invalid length. [ 126.131177][ T7384] netlink: 'syz.1.369': attribute type 32 has an invalid length. [ 126.574001][ T7396] sctp: [Deprecated]: syz.1.372 (pid 7396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.574001][ T7396] Use struct sctp_sack_info instead [ 126.695139][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.734903][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 126.856170][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.375'. [ 126.919623][ T7404] veth1_macvtap: left promiscuous mode [ 126.961796][ T7403] gretap0: entered promiscuous mode [ 127.060482][ T7403] gretap0: left promiscuous mode [ 127.158790][ T7408] 8021q: VLANs not supported on caif0 [ 127.292731][ T7417] sctp: [Deprecated]: syz.3.379 (pid 7417) Use of int in max_burst socket option deprecated. [ 127.292731][ T7417] Use struct sctp_assoc_value instead [ 127.374911][ T7412] syz_tun: entered allmulticast mode [ 127.427509][ T7410] syz_tun: left allmulticast mode [ 127.552500][ T7431] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 127.774958][ T7445] netlink: 112 bytes leftover after parsing attributes in process `syz.0.385'. [ 127.803682][ T7444] ip6gretap0: entered promiscuous mode [ 127.828710][ T7444] macsec2: entered promiscuous mode [ 127.869554][ T7444] ip6gretap0: left promiscuous mode [ 128.417013][ T7477] __nla_validate_parse: 1 callbacks suppressed [ 128.417033][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.393'. [ 128.425355][ T7483] netlink: 'syz.4.394': attribute type 3 has an invalid length. [ 128.452705][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 128.465952][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz.3.395'. [ 128.515910][ T7487] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.525453][ T7487] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.857996][ T7499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.955940][ T7506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 128.971078][ T7509] netlink: 48 bytes leftover after parsing attributes in process `syz.1.401'. [ 129.159763][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 129.165696][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 129.187715][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 129.197091][ T7522] netlink: 'syz.0.405': attribute type 13 has an invalid length. [ 129.213271][ T7522] netlink: 'syz.0.405': attribute type 12 has an invalid length. [ 129.291233][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 129.571272][ T7535] IPVS: set_ctl: invalid protocol: 197 172.20.20.59:20002 [ 129.891436][ T7543] netlink: 36 bytes leftover after parsing attributes in process `syz.0.412'. [ 130.331299][ T7571] xt_CT: No such helper "syz0" [ 130.622867][ T7591] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 130.674689][ T7602] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 130.810855][ T7595] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.057007][ T7595] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.074156][ T7607] syz.4.426: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 131.118364][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.4.426 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 131.118397][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.118415][ T7607] Call Trace: [ 131.118422][ T7607] [ 131.118430][ T7607] dump_stack_lvl+0x241/0x360 [ 131.118471][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.118493][ T7607] ? __pfx__printk+0x10/0x10 [ 131.118518][ T7607] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 131.118545][ T7607] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 131.118573][ T7607] warn_alloc+0x278/0x410 [ 131.118601][ T7607] ? __pfx_warn_alloc+0x10/0x10 [ 131.118630][ T7607] ? xskq_create+0xb6/0x170 [ 131.118650][ T7607] ? __get_vm_area_node+0x1c8/0x2d0 [ 131.118682][ T7607] ? __get_vm_area_node+0x25c/0x2d0 [ 131.118722][ T7607] __vmalloc_node_range_noprof+0x62f/0x1380 [ 131.118772][ T7607] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 131.118800][ T7607] ? __kasan_kmalloc+0x98/0xb0 [ 131.118831][ T7607] vmalloc_user_noprof+0x74/0x80 [ 131.118853][ T7607] ? xskq_create+0xb6/0x170 [ 131.118872][ T7607] xskq_create+0xb6/0x170 [ 131.118895][ T7607] xsk_init_queue+0xa1/0x100 [ 131.118918][ T7607] xsk_setsockopt+0x560/0x810 [ 131.118953][ T7607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.118986][ T7607] ? __pfx_aa_sk_perm+0x10/0x10 [ 131.119019][ T7607] ? __pfx_lock_acquire+0x10/0x10 [ 131.119049][ T7607] ? aa_sock_opt_perm+0x79/0x120 [ 131.119087][ T7607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 131.119118][ T7607] do_sock_setsockopt+0x3af/0x720 [ 131.119149][ T7607] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 131.119178][ T7607] ? __fget_files+0x395/0x410 [ 131.119208][ T7607] ? __fget_files+0x2a/0x410 [ 131.119247][ T7607] __x64_sys_setsockopt+0x1ee/0x280 [ 131.119285][ T7607] do_syscall_64+0xf3/0x230 [ 131.119313][ T7607] ? clear_bhb_loop+0x35/0x90 [ 131.119346][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.119384][ T7607] RIP: 0033:0x7fc00f98d169 [ 131.119406][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.119423][ T7607] RSP: 002b:00007fc0107af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.119445][ T7607] RAX: ffffffffffffffda RBX: 00007fc00fba5fa0 RCX: 00007fc00f98d169 [ 131.119460][ T7607] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 131.119472][ T7607] RBP: 00007fc00fa0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 131.119484][ T7607] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000000 [ 131.119496][ T7607] R13: 0000000000000000 R14: 00007fc00fba5fa0 R15: 00007ffdb4d1b7d8 [ 131.119527][ T7607] [ 131.119540][ T7607] Mem-Info: [ 131.405852][ T7607] active_anon:6715 inactive_anon:0 isolated_anon:0 [ 131.405852][ T7607] active_file:1289 inactive_file:38320 isolated_file:0 [ 131.405852][ T7607] unevictable:768 dirty:108 writeback:0 [ 131.405852][ T7607] slab_reclaimable:10020 slab_unreclaimable:99241 [ 131.405852][ T7607] mapped:30067 shmem:3267 pagetables:781 [ 131.405852][ T7607] sec_pagetables:0 bounce:0 [ 131.405852][ T7607] kernel_misc_reclaimable:0 [ 131.405852][ T7607] free:1343127 free_pcp:266 free_cma:0 [ 131.454976][ T7607] Node 0 active_anon:27260kB inactive_anon:0kB active_file:5156kB inactive_file:153204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120668kB dirty:428kB writeback:0kB shmem:11932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11424kB pagetables:3124kB sec_pagetables:0kB all_unreclaimable? no [ 131.518195][ T7607] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 131.549357][ T7607] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.577234][ T7607] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 131.584008][ T7607] Node 0 DMA32 free:1446936kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:28720kB inactive_anon:0kB active_file:5156kB inactive_file:152880kB unevictable:1536kB writepending:428kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:1532kB local_pcp:668kB free_cma:0kB [ 131.622880][ T7607] lowmem_reserve[]: 0 0 0 0 0 [ 131.628086][ T7607] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.655826][ T7607] lowmem_reserve[]: 0 0 0 0 0 [ 131.672420][ T7595] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.674946][ T7607] Node 1 Normal free:3907828kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.734144][ T7607] lowmem_reserve[]: 0 0 0 0 0 [ 131.739109][ T7607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.766252][ T7607] Node 0 DMA32: 94*4kB (UME) 35*8kB (UME) 7*16kB (UM) 867*32kB (UME) 406*64kB (UME) 52*128kB (UME) 4*256kB (UE) 8*512kB (M) 7*1024kB (UM) 4*2048kB (UM) 333*4096kB (UM) = 1445600kB [ 131.793040][ T7607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.818636][ T7607] Node 1 Normal: 205*4kB (UME) 58*8kB (UME) 39*16kB (UME) 200*32kB (UME) 102*64kB (UME) 28*128kB (UME) 17*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3907828kB [ 131.846862][ T7607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.857859][ T7607] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.874787][ T7607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.887200][ T7607] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.906333][ T7607] 43901 total pagecache pages [ 131.912539][ T7607] 0 pages in swap cache [ 131.916738][ T7607] Free swap = 124996kB [ 132.018777][ T7595] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.025253][ T7607] Total swap = 124996kB [ 132.033502][ T7607] 2097051 pages RAM [ 132.037536][ T7607] 0 pages HighMem/MovableOnly [ 132.042401][ T7607] 427900 pages reserved [ 132.046711][ T7607] 0 pages cma reserved [ 132.134108][ T7595] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.153710][ T7595] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.194630][ T7595] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.223887][ T7595] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.234379][ T7634] netlink: 'syz.4.432': attribute type 5 has an invalid length. [ 132.607365][ T7653] xt_socket: unknown flags 0x8 [ 132.618883][ T7653] netlink: 'syz.0.437': attribute type 126 has an invalid length. [ 132.867098][ T7662] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.228623][ T7676] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.263061][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.395848][ T7676] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.557017][ T7676] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.663133][ T7694] __nla_validate_parse: 11 callbacks suppressed [ 133.663155][ T7694] netlink: 52 bytes leftover after parsing attributes in process `syz.3.449'. [ 133.682292][ T7676] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.705114][ T7694] netlink: 48 bytes leftover after parsing attributes in process `syz.3.449'. [ 133.734649][ T7697] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 133.793860][ T7694] tunl0: entered allmulticast mode [ 133.901128][ T7676] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.968593][ T7676] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.007363][ T7676] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.035321][ T7676] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.063128][ T7701] netlink: 184 bytes leftover after parsing attributes in process `syz.3.452'. [ 134.229673][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.246582][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.259433][ T7714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.306701][ T7714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.444451][ T7724] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 134.444954][ T7722] IPVS: stopping backup sync thread 7724 ... [ 134.576693][ T7727] netlink: 5 bytes leftover after parsing attributes in process `syz.4.459'. [ 134.703356][ T7734] netlink: 48 bytes leftover after parsing attributes in process `syz.3.462'. [ 134.910313][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 135.085120][ T7753] tipc: MTU too low for tipc bearer [ 135.132110][ T7753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.467'. [ 135.181358][ T55] Bluetooth: hci4: command 0x0405 tx timeout [ 135.289695][ T7757] netlink: 'syz.1.469': attribute type 2 has an invalid length. [ 135.343239][ T7757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.469'. [ 135.682402][ T7782] netlink: 'syz.3.477': attribute type 39 has an invalid length. [ 135.719198][ T7785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.072503][ T7801] sctp: [Deprecated]: syz.1.481 (pid 7801) Use of int in max_burst socket option. [ 136.072503][ T7801] Use struct sctp_assoc_value instead [ 136.205208][ T7806] netlink: 'syz.4.482': attribute type 1 has an invalid length. [ 136.224612][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 136.303174][ T7810] tipc: Enabling of bearer rejected, failed to enable media [ 136.346935][ T7809] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 136.357497][ T7814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.486'. [ 136.414561][ T7816] tipc: Enabling of bearer rejected, failed to enable media [ 136.693644][ T7828] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 136.732529][ T7828] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 136.756495][ T7828] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 136.781182][ T7828] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 136.843805][ T7828] netlink: 'syz.1.490': attribute type 1 has an invalid length. [ 136.880710][ T7214] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.905768][ T7214] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.984197][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.991980][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.032242][ T7881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.084675][ T7881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.665467][ T7419] ------------[ cut here ]------------ [ 138.671317][ T7419] refcount_t: underflow; use-after-free. [ 138.677449][ T7419] WARNING: CPU: 0 PID: 7419 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 138.686879][ T7419] Modules linked in: [ 138.690806][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: kbnepd bnep0 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 138.701683][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.711783][ T7419] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 138.718216][ T7419] Code: 40 b5 80 8c e8 57 07 8c fc 90 0f 0b 90 90 eb 99 e8 0b 4b cc fc c6 05 c1 89 31 0b 01 90 48 c7 c7 a0 b5 80 8c e8 37 07 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 e8 4a cc fc c6 05 9b 89 31 0b 01 90 [ 138.738339][ T7419] RSP: 0018:ffffc9000553f700 EFLAGS: 00010246 [ 138.744517][ T7419] RAX: 5659bc7d21e56a00 RBX: ffff888032c07478 RCX: ffff88802e025a00 [ 138.752528][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.760905][ T7419] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 138.768999][ T7419] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888032c07460 [ 138.777402][ T7419] R13: 1ffff11006580e8c R14: ffff888032c07460 R15: ffffffff8638ea10 [ 138.785568][ T7419] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 138.794591][ T7419] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.801322][ T7419] CR2: 0000400000f25000 CR3: 00000000330d8000 CR4: 00000000003526f0 [ 138.809316][ T7419] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 138.817327][ T7419] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 138.825334][ T7419] Call Trace: [ 138.828621][ T7419] [ 138.831689][ T7419] ? __warn+0x165/0x4d0 [ 138.835857][ T7419] ? refcount_warn_saturate+0x15a/0x1d0 [ 138.841440][ T7419] ? report_bug+0x2b3/0x500 [ 138.845948][ T7419] ? refcount_warn_saturate+0x15a/0x1d0 [ 138.851541][ T7419] ? handle_bug+0x60/0x90 [ 138.855883][ T7419] ? exc_invalid_op+0x1a/0x50 [ 138.860982][ T7419] ? asm_exc_invalid_op+0x1a/0x20 [ 138.866022][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 138.871917][ T7419] ? __warn_printk+0x292/0x360 [ 138.876717][ T7419] ? refcount_warn_saturate+0x15a/0x1d0 [ 138.882436][ T7419] klist_dec_and_del+0x3ec/0x3f0 [ 138.887389][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 138.892974][ T7419] klist_del+0xa7/0x110 [ 138.897141][ T7419] device_del+0x2c9/0x9b0 [ 138.901511][ T7419] ? __pfx_device_del+0x10/0x10 [ 138.906372][ T7419] ? netdev_unregister_kobject+0x178/0x250 [ 138.912213][ T7419] unregister_netdevice_many_notify+0x1f2e/0x24f0 [ 138.918653][ T7419] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 138.925458][ T7419] ? trace_contention_end+0x3c/0x120 [ 138.930871][ T7419] ? __mutex_lock+0x397/0x1010 [ 138.935656][ T7419] ? rtnl_net_dev_lock+0x271/0x320 [ 138.940797][ T7419] ? __pfx___mutex_lock+0x10/0x10 [ 138.945830][ T7419] ? __pfx_lock_release+0x10/0x10 [ 138.950890][ T7419] unregister_netdevice_queue+0x303/0x370 [ 138.956622][ T7419] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 138.963288][ T7419] ? rtnl_net_dev_lock+0x37/0x320 [ 138.968320][ T7419] ? rtnl_net_dev_lock+0x302/0x320 [ 138.973748][ T7419] ? rtnl_net_dev_lock+0x37/0x320 [ 138.978783][ T7419] unregister_netdev+0x1f/0x60 [ 138.983665][ T7419] bnep_session+0x2e4e/0x3040 [ 138.988386][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 138.993445][ T7419] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 138.999348][ T7419] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.005743][ T7419] ? __pfx_woken_wake_function+0x10/0x10 [ 139.011423][ T7419] ? __kthread_parkme+0x169/0x1d0 [ 139.016486][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 139.021552][ T7419] kthread+0x7a9/0x920 [ 139.025623][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.030934][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 139.036007][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.040843][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.045440][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.050078][ T7419] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.055281][ T7419] ? lockdep_hardirqs_on+0x99/0x150 [ 139.060525][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.065465][ T7419] ret_from_fork+0x4b/0x80 [ 139.069893][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.074799][ T7419] ret_from_fork_asm+0x1a/0x30 [ 139.079585][ T7419] [ 139.082737][ T7419] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 139.090017][ T7419] CPU: 0 UID: 0 PID: 7419 Comm: kbnepd bnep0 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 139.100864][ T7419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.110919][ T7419] Call Trace: [ 139.114199][ T7419] [ 139.117127][ T7419] dump_stack_lvl+0x241/0x360 [ 139.121843][ T7419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.127040][ T7419] ? __pfx__printk+0x10/0x10 [ 139.131624][ T7419] ? _printk+0xd5/0x120 [ 139.135778][ T7419] ? __init_begin+0x41000/0x41000 [ 139.140830][ T7419] ? vscnprintf+0x5d/0x90 [ 139.145162][ T7419] panic+0x349/0x880 [ 139.149055][ T7419] ? __warn+0x174/0x4d0 [ 139.153209][ T7419] ? __pfx_panic+0x10/0x10 [ 139.157632][ T7419] ? ret_from_fork_asm+0x1a/0x30 [ 139.162576][ T7419] __warn+0x344/0x4d0 [ 139.166555][ T7419] ? refcount_warn_saturate+0x15a/0x1d0 [ 139.172108][ T7419] report_bug+0x2b3/0x500 [ 139.176465][ T7419] ? refcount_warn_saturate+0x15a/0x1d0 [ 139.182037][ T7419] handle_bug+0x60/0x90 [ 139.186196][ T7419] exc_invalid_op+0x1a/0x50 [ 139.190707][ T7419] asm_exc_invalid_op+0x1a/0x20 [ 139.195564][ T7419] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 139.201743][ T7419] Code: 40 b5 80 8c e8 57 07 8c fc 90 0f 0b 90 90 eb 99 e8 0b 4b cc fc c6 05 c1 89 31 0b 01 90 48 c7 c7 a0 b5 80 8c e8 37 07 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 e8 4a cc fc c6 05 9b 89 31 0b 01 90 [ 139.221358][ T7419] RSP: 0018:ffffc9000553f700 EFLAGS: 00010246 [ 139.227429][ T7419] RAX: 5659bc7d21e56a00 RBX: ffff888032c07478 RCX: ffff88802e025a00 [ 139.235398][ T7419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.243368][ T7419] RBP: 0000000000000003 R08: ffffffff8181ae52 R09: fffffbfff1d3a69c [ 139.251342][ T7419] R10: dffffc0000000000 R11: fffffbfff1d3a69c R12: ffff888032c07460 [ 139.259321][ T7419] R13: 1ffff11006580e8c R14: ffff888032c07460 R15: ffffffff8638ea10 [ 139.267297][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 139.272868][ T7419] ? __warn_printk+0x292/0x360 [ 139.277642][ T7419] klist_dec_and_del+0x3ec/0x3f0 [ 139.282590][ T7419] ? __pfx_klist_children_put+0x10/0x10 [ 139.288141][ T7419] klist_del+0xa7/0x110 [ 139.292328][ T7419] device_del+0x2c9/0x9b0 [ 139.296668][ T7419] ? __pfx_device_del+0x10/0x10 [ 139.301521][ T7419] ? netdev_unregister_kobject+0x178/0x250 [ 139.307340][ T7419] unregister_netdevice_many_notify+0x1f2e/0x24f0 [ 139.313775][ T7419] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 139.320561][ T7419] ? trace_contention_end+0x3c/0x120 [ 139.325867][ T7419] ? __mutex_lock+0x397/0x1010 [ 139.330646][ T7419] ? rtnl_net_dev_lock+0x271/0x320 [ 139.335757][ T7419] ? __pfx___mutex_lock+0x10/0x10 [ 139.340786][ T7419] ? __pfx_lock_release+0x10/0x10 [ 139.345821][ T7419] unregister_netdevice_queue+0x303/0x370 [ 139.351637][ T7419] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 139.357887][ T7419] ? rtnl_net_dev_lock+0x37/0x320 [ 139.362907][ T7419] ? rtnl_net_dev_lock+0x302/0x320 [ 139.368015][ T7419] ? rtnl_net_dev_lock+0x37/0x320 [ 139.373039][ T7419] unregister_netdev+0x1f/0x60 [ 139.377825][ T7419] bnep_session+0x2e4e/0x3040 [ 139.382535][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 139.387570][ T7419] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 139.393467][ T7419] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.399802][ T7419] ? __pfx_woken_wake_function+0x10/0x10 [ 139.405448][ T7419] ? __kthread_parkme+0x169/0x1d0 [ 139.410489][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 139.415521][ T7419] kthread+0x7a9/0x920 [ 139.419589][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.424200][ T7419] ? __pfx_bnep_session+0x10/0x10 [ 139.429407][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.434019][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.438630][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.443219][ T7419] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.448421][ T7419] ? lockdep_hardirqs_on+0x99/0x150 [ 139.453706][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.458295][ T7419] ret_from_fork+0x4b/0x80 [ 139.462716][ T7419] ? __pfx_kthread+0x10/0x10 [ 139.467306][ T7419] ret_from_fork_asm+0x1a/0x30 [ 139.472091][ T7419] [ 140.578908][ T7419] Shutting down cpus with NMI [ 140.583989][ T7419] Kernel Offset: disabled [ 140.588433][ T7419] Rebooting in 86400 seconds..